You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

W2k Webrowser Hijacked!

My webrowser has been hijacked and I'm not able to find it in safe mode using Ad-Aware/Spybot. I am using HiJackThis and the best I can determine is the hijacker is hiding (F2- REG:system.ini:UserInit=C:\WINDOWS\system32\Userinit.exe). Does anyone know if this is would be safe to delete?

BC AdBot (Login to Remove)

You should never attempt to fix anything using HijackThis, until someone who is experienced at reading the log outputs, has a chance to review it.Fixing the wrong items can make your computer unbootable.

Spaces, extra characters, spelling, file location, plus numerous other subtle changes, all make the difference between a "good", or "bad", file entry.

Removing entries in HJT before the problem is properly identified, and correct removal instructions posted, can make the problem undetectable to other detection and removal tools.HijackThis should only be used to clean up the entries left behind, after you have properly removed the offending program, file, trojan, worm, hijacker, etc. And this usually requires help.

I suggest you post a HJT log for our Team to examine.They'll take you through the fix, step by step.

Once you post your log, don't make any changes to your system, as that could change the results of the posted log, making it more difficult to properly clean your system.

Run a log, and post it in the HijackThis forum, >at this link<. Do not, post it in this topic.Do not, fix anything, yet.A member, of the HJT Team, will help you out.It may take a while to get a response from the HJT Team, because they are very busy. Please, be patient, as these people are volunteers. They will help you, as soon as possible.

NOTE:Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.